Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:SUSE-SU-2024:2362-1
HistoryJul 09, 2024 - 2:02 p.m.

Security update for the Linux Kernel

2024-07-0914:02:32
Google
osv.dev

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

Low

JSON

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47247: net/mlx5e: Fix use-after-free of encap entry in neigh update handler (bsc#1224865).
  • CVE-2021-47311: net: qcom/emac: fix UAF in emac_remove (bsc#1225010).
  • CVE-2021-47368: enetc: Fix illegal access when reading affinity_hint (bsc#1225161).
  • CVE-2021-47372: net: macb: fix use after free on rmmod (bsc#1225184).
  • CVE-2021-47379: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (bsc#1225203).
  • CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
  • CVE-2022-48760: USB: core: Fix hang in usb_kill_urb by adding memory barriers (bsc#1226712).
  • CVE-2023-52707: sched/psi: Fix use-after-free in ep_remove_wait_queue() (bsc#1225109). polled (bsc#1202623).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
  • CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384).
  • CVE-2024-35789: Check fast rx for non-4addr sta VLAN changes (bsc#1224749).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1224764).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1224765).
  • CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1224703).
  • CVE-2024-36894: usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete (bsc#1225749).
  • CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732).
  • CVE-2024-36940: pinctrl: core: delete incorrect free in pinctrl_enable() (bsc#1225840).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1225866).
  • CVE-2024-38545: RDMA/hns: Fix UAF for cq async event (bsc#1226595)
  • CVE-2024-38559: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226758).
  • CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786).

The following non-security bugs were fixed:

  • NFS: avoid infinite loop in pnfs_update_layout (bsc#1219633 bsc#1226226).
  • ocfs2: adjust enabling place for la window (bsc#1219224).
  • ocfs2: fix sparse warnings (bsc#1219224).
  • ocfs2: improve write IO performance when fragmentation is high (bsc#1219224).
  • ocfs2: speed up chain-list searching (bsc#1219224).
  • psi: Fix uaf issue when psi trigger is destroyed while being
  • x86/tsc: Trust initial offset in architectural TSC-adjust MSRs (bsc#1222015 bsc#1226962).

References

Related

osv 30
openvas 2
nessus 6
nvd 21
ubuntucve 25
cvelist 20
cve 24
redhatcve 23
debiancve 27
vulnrichment 21
osv
osv
Security update for the Linux Kernel
2024-07-10 12:03:43
Security update for the Linux Kernel
2024-07-09 14:03:50
Security update for the Linux Kernel
2024-07-10 13:03:41
openvas
openvas
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2024:2362-1)
2024-07-12 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:2895-1)
2024-08-14 00:00:00
nessus
nessus
SUSE SLES15 Security Update : kernel (SUSE-SU-2024:2362-1)
2024-07-10 00:00:00
SUSE SLES15 Security Update : kernel (SUSE-SU-2024:2365-1)
2024-07-10 00:00:00
SUSE SLES15 Security Update : kernel (SUSE-SU-2024:2495-1)
2024-07-17 00:00:00
nvd
nvd
CVE-2022-48711
2024-06-20 11:15:54
CVE-2021-3896
2021-11-04 21:15:07
CVE-2021-47247
2024-05-21 15:15:13
ubuntucve
ubuntucve
CVE-2022-48711
2024-06-20 00:00:00
CVE-2021-47611
2024-06-19 00:00:00
CVE-2021-47247
2024-05-21 00:00:00
cvelist
cvelist
CVE-2022-48711 tipc: improve size validations for received domain records
2024-06-20 11:13:06
CVE-2022-48759 rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev
2024-06-20 11:13:37
CVE-2022-48748 net: bridge: vlan: fix memory leak in __allowed_ingress
2024-06-20 11:13:30
cve
cve
CVE-2022-48711
2024-06-20 11:15:54
CVE-2021-3896
2021-11-04 21:15:07
CVE-2021-47595
2024-06-19 15:15:54
redhatcve
redhatcve
CVE-2022-48711
2024-06-20 12:26:49
CVE-2021-47247
2024-05-23 14:03:38
CVE-2021-47595
2024-06-20 10:53:50
debiancve
debiancve
CVE-2022-48711
2024-06-20 11:15:54
CVE-2022-48748
2024-06-20 12:15:13
CVE-2021-47328
2024-05-21 15:15:19
vulnrichment
vulnrichment
CVE-2022-48711 tipc: improve size validations for received domain records
2024-06-20 11:13:06
CVE-2021-47247 net/mlx5e: Fix use-after-free of encap entry in neigh update handler
2024-05-21 14:19:44
CVE-2022-48726 RDMA/ucma: Protect mc during concurrent multicast leaves
2024-06-20 11:13:15

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

Low

JSON
Related for OSV:SUSE-SU-2024:2362-1
osv30openvas2nessus6nvd21ubuntucve25cvelist20cve24redhatcve23debiancve27vulnrichment21